Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

823980 on IIS4

  
Goto page 1, 2
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  IIS, Intel Netstructure 7110 and W2k Load balanci..  
Author Message
bighouse

External


Since: Sep 01, 2003
Posts: 3



(Msg. 1) Posted: Mon Sep 01, 2003 5:34 pm
Post subject: 823980 on IIS4
Archived from groups: microsoft>public>inetserver>iis (more info?)
Hello

after installing 823980 on a nt4 server, IIS4 would give "connection
refused" when the traffic to the site grows. It's like it limited the
number of concurrent users for IUSR or something like that.

If the traffic is low, everything works fine. If the traffic is just
normal, as it was before august, you get sometimes "connection
refused".

Uninstalling the patch doesn't solve the issue...

What can I do?

Thanks

 >> Stay informed about: 823980 on IIS4 
Back to top
Login to vote
patfilot

External


Since: Aug 24, 2003
Posts: 1478



(Msg. 2) Posted: Tue Sep 02, 2003 1:01 am
Post subject: Re: 823980 on IIS4 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
1) Make sure you have the patch.
2) Most likely, something else is going on.

A 'connection refused' error means that the quque on the network port
(80/443/etc.) has filled. For those curious, this is controlled by the
ServerListenBacklog metabase setting and is the equivalent to the ASP queue.
Socket backlogs are documented in the platform SDK.

Anyway, back to your problem.

Next time it happens, run IISState (www.iisfaq.com/iisstate) against
inetinfo.exe. Inetinfo.exe owns the listener threads, so if something is
going awry and preventing them from clearing the queue, this is where we
need to look first.

If you need help reading the logs, post them to the newsgroup.

iisstate -p <pid for inetinfo> <enter>

Pat


"Lorenzo" <bighouse RemoveThis @email.it> wrote in message
news:c06c32dd.0309011334.269fb4f4@posting.google.com...
 > Hello
 >
 > after installing 823980 on a nt4 server, IIS4 would give "connection
 > refused" when the traffic to the site grows. It's like it limited the
 > number of concurrent users for IUSR or something like that.
 >
 > If the traffic is low, everything works fine. If the traffic is just
 > normal, as it was before august, you get sometimes "connection
 > refused".
 >
 > Uninstalling the patch doesn't solve the issue...
 >
 > What can I do?
 >
 > Thanks<!-- ~MESSAGE_AFTER~ -->

 >> Stay informed about: 823980 on IIS4 
Back to top
Login to vote
bighouse1

External


Since: Sep 02, 2003
Posts: 13



(Msg. 3) Posted: Tue Sep 02, 2003 12:00 pm
Post subject: Re: 823980 on IIS4 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Hello

is there any performance monitor counter to be selected to see how the
listener threads are
doing?

Thanks


"Pat [MSFT]" <patfilot.DeleteThis@online.microsoft.com> ha scritto nel messaggio
news:O%23bw78QcDHA.1744@TK2MSFTNGP12.phx.gbl...
 > 1) Make sure you have the patch.
 > 2) Most likely, something else is going on.
 >
 > A 'connection refused' error means that the quque on the network port
 > (80/443/etc.) has filled. For those curious, this is controlled by the
 > ServerListenBacklog metabase setting and is the equivalent to the ASP
queue.
 > Socket backlogs are documented in the platform SDK.
 >
 > Anyway, back to your problem.
 >
 > Next time it happens, run IISState (www.iisfaq.com/iisstate) against
 > inetinfo.exe. Inetinfo.exe owns the listener threads, so if something is
 > going awry and preventing them from clearing the queue, this is where we
 > need to look first.
 >
 > If you need help reading the logs, post them to the newsgroup.
 >
 > iisstate -p <pid for inetinfo> <enter>
 >
 > Pat
 >
 >
 > "Lorenzo" <bighouse.DeleteThis@email.it> wrote in message
 > news:c06c32dd.0309011334.269fb4f4@posting.google.com...
  > > Hello
  > >
  > > after installing 823980 on a nt4 server, IIS4 would give "connection
  > > refused" when the traffic to the site grows. It's like it limited the
  > > number of concurrent users for IUSR or something like that.
  > >
  > > If the traffic is low, everything works fine. If the traffic is just
  > > normal, as it was before august, you get sometimes "connection
  > > refused".
  > >
  > > Uninstalling the patch doesn't solve the issue...
  > >
  > > What can I do?
  > >
  > > Thanks
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: 823980 on IIS4 
Back to top
Login to vote
patfilot

External


Since: Aug 24, 2003
Posts: 1478



(Msg. 4) Posted: Tue Sep 02, 2003 12:00 pm
Post subject: Re: 823980 on IIS4 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Not really. They operate asynchronously. You also can't see the
listenbacklog level (it is actually a kernel layer queue). You can watch
the Current Connections counter. Normally it will spike up if the listeners
are having a problem (i.e. the connections are not being released b/c they
aren't being serviced).

Pat

"Lorenzo" <bighouse.TakeThisOut@email.it> wrote in message
news:bj1f3j$f3e$1@lacerta.tiscalinet.it...
 > Hello
 >
 > is there any performance monitor counter to be selected to see how the
 > listener threads are
 > doing?
 >
 > Thanks
 >
 >
 > "Pat [MSFT]" <patfilot.TakeThisOut@online.microsoft.com> ha scritto nel messaggio
 > news:O%23bw78QcDHA.1744@TK2MSFTNGP12.phx.gbl...
  > > 1) Make sure you have the patch.
  > > 2) Most likely, something else is going on.
  > >
  > > A 'connection refused' error means that the quque on the network port
  > > (80/443/etc.) has filled. For those curious, this is controlled by the
  > > ServerListenBacklog metabase setting and is the equivalent to the ASP
 > queue.
  > > Socket backlogs are documented in the platform SDK.
  > >
  > > Anyway, back to your problem.
  > >
  > > Next time it happens, run IISState (www.iisfaq.com/iisstate) against
  > > inetinfo.exe. Inetinfo.exe owns the listener threads, so if something
is
  > > going awry and preventing them from clearing the queue, this is where we
  > > need to look first.
  > >
  > > If you need help reading the logs, post them to the newsgroup.
  > >
  > > iisstate -p <pid for inetinfo> <enter>
  > >
  > > Pat
  > >
  > >
  > > "Lorenzo" <bighouse.TakeThisOut@email.it> wrote in message
  > > news:c06c32dd.0309011334.269fb4f4@posting.google.com...
   > > > Hello
   > > >
   > > > after installing 823980 on a nt4 server, IIS4 would give "connection
   > > > refused" when the traffic to the site grows. It's like it limited the
   > > > number of concurrent users for IUSR or something like that.
   > > >
   > > > If the traffic is low, everything works fine. If the traffic is just
   > > > normal, as it was before august, you get sometimes "connection
   > > > refused".
   > > >
   > > > Uninstalling the patch doesn't solve the issue...
   > > >
   > > > What can I do?
   > > >
   > > > Thanks
  > >
  > >
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: 823980 on IIS4 
Back to top
Login to vote
bighouse1

External


Since: Sep 02, 2003
Posts: 13



(Msg. 5) Posted: Tue Sep 02, 2003 5:09 pm
Post subject: Re: 823980 on IIS4 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Pat, thanks for your answers.

I will post the iisstate log tonight (if it's too long can I make it
available to download through an ftp server?).

In the meanwhile, I have to add something to what I said before.

- Isn't that weird that IIS4 is listening on 3 different IP's and I
intermittently start getting
"connection refused" on ONLY ONE IP (the busiest one) and then the problem
goes away
and comes back?
- How come the other 2 IP's don't have the same problem?
- I have set ServeListenBackLog to 5000 and Maxpoolthreads to 20 and I still
get "connection
refused" let's say 1 time out of 2, average. If I reboot the server, as soon
as the traffic comes back, I
start getting "connection refused" even though the number of connections
should be so high.
I don't get "connection refused" in late afternoon, night and early morning
so it's something related
to traffic but the traffic is even lower than when everything worked fine.
- inetinfo.exe gets only 10-20% of cpu at the most.
- I have removed all isapi (2 of them) and I left the frontpage one only.
- nothing weird appears in the event logs.

Might it be something related to tcp even though if I telnet a different
port on the IP (that gives "connection
refused" on port 80) it works?
Might it be some asp blocking?

Please help me, I have growing crazy after this! Thanks




"Pat [MSFT]" <patfilot.TakeThisOut@online.microsoft.com> ha scritto nel messaggio
news:eqitUJScDHA.2460@TK2MSFTNGP10.phx.gbl...
 > Not really. They operate asynchronously. You also can't see the
 > listenbacklog level (it is actually a kernel layer queue). You can watch
 > the Current Connections counter. Normally it will spike up if the
listeners
 > are having a problem (i.e. the connections are not being released b/c they
 > aren't being serviced).
 >
 > Pat
 >
 > "Lorenzo" <bighouse.TakeThisOut@email.it> wrote in message
 > news:bj1f3j$f3e$1@lacerta.tiscalinet.it...
  > > Hello
  > >
  > > is there any performance monitor counter to be selected to see how the
  > > listener threads are
  > > doing?
  > >
  > > Thanks
  > >
  > >
  > > "Pat [MSFT]" <patfilot.TakeThisOut@online.microsoft.com> ha scritto nel messaggio
  > > news:O%23bw78QcDHA.1744@TK2MSFTNGP12.phx.gbl...
   > > > 1) Make sure you have the patch.
   > > > 2) Most likely, something else is going on.
   > > >
   > > > A 'connection refused' error means that the quque on the network port
   > > > (80/443/etc.) has filled. For those curious, this is controlled by
the
   > > > ServerListenBacklog metabase setting and is the equivalent to the ASP
  > > queue.
   > > > Socket backlogs are documented in the platform SDK.
   > > >
   > > > Anyway, back to your problem.
   > > >
   > > > Next time it happens, run IISState (www.iisfaq.com/iisstate) against
   > > > inetinfo.exe. Inetinfo.exe owns the listener threads, so if something
 > is
   > > > going awry and preventing them from clearing the queue, this is where
we
   > > > need to look first.
   > > >
   > > > If you need help reading the logs, post them to the newsgroup.
   > > >
   > > > iisstate -p <pid for inetinfo> <enter>
   > > >
   > > > Pat
   > > >
   > > >
   > > > "Lorenzo" <bighouse.TakeThisOut@email.it> wrote in message
   > > > news:c06c32dd.0309011334.269fb4f4@posting.google.com...
   > > > > Hello
   > > > >
   > > > > after installing 823980 on a nt4 server, IIS4 would give "connection
   > > > > refused" when the traffic to the site grows. It's like it limited
the
   > > > > number of concurrent users for IUSR or something like that.
   > > > >
   > > > > If the traffic is low, everything works fine. If the traffic is just
   > > > > normal, as it was before august, you get sometimes "connection
   > > > > refused".
   > > > >
   > > > > Uninstalling the patch doesn't solve the issue...
   > > > >
   > > > > What can I do?
   > > > >
   > > > > Thanks
   > > >
   > > >
  > >
  > >
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: 823980 on IIS4 
Back to top
Login to vote
bighouse1

External


Since: Sep 02, 2003
Posts: 13



(Msg. 6) Posted: Tue Sep 02, 2003 6:33 pm
Post subject: Re: 823980 on IIS4 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Hello

I will post 5 log files, the first one was made with no web traffic towards
the server (blocked at the firewall), the other 4 were made while
inetinfo.exe would not accept connection on port 80 for the first IP (the
other IP's were working fine, please refer to my other message). My brain
says that this has to do with the patch for RPC but I have no real clue or
proof (uninstalling the patch doesn't solve). At the moment the server, NT4
server, is fully patched with all the available patches.

During these years I have changed many registry and metabase settings but
everything worked fine until the 20th of august, when I installed several MS
patches (but it may be unrelated). Is there any metabase or registry
settings that I need to check?

The asp "request executing" counter hardly gets to 1 and "request queued" is
costantly 0.
The concurrent users are about 100, anonymous users is usually around 10 and
something goes to 0.

What other data may be useful?

The logs follow. Thanks
 >> Stay informed about: 823980 on IIS4 
Back to top
Login to vote
bighouse1

External


Since: Sep 02, 2003
Posts: 13



(Msg. 7) Posted: Tue Sep 02, 2003 6:35 pm
Post subject: Re: 823980 on IIS4 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
I forgot to add to the other messages that there are no out of process
applications, I have Software Artisans' Safileup installed.

First log, no traffic towards the server. Log taken after a couple of
minutes that inetinfo.exe would stop loading the metabase:

Opened log file 'C:\iisstate\output\IISState-107.log'

***********************
Starting new log output
IISState version 3.1

Tue Sep 02 15:07:23 2003

OS = NT4
Executable: inetinfo.exe
PID = 107

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 6a
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd44 77f0d2ca ntdll!NtReadFile+0xb
01 0006fdb0 77dd8a61 KERNEL32!ReadFile+0x1a6
02 0006fde4 77dd84ad ADVAPI32!ScGetPipeInput+0x28
03 0006fe48 77dd82ca ADVAPI32!ScDispatcherLoop+0x46
04 0006fe6c 0100182c ADVAPI32!StartServiceCtrlDispatcherA+0x82
05 0006fea4 010015d5 inetinfo!StartDispatchTable+0x61
06 0006ff70 01001e7f inetinfo!main+0x2a5
07 0006ffc0 77f1bbb5 inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40




Thread ID: 1
System Thread ID: 3f
Kernel Time: 0:0:0.10
User Time: 0:0:16.613
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0085fe2c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 0085fe54 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 0085fe64 683a18fe KERNEL32!WaitForSingleObject+0xf
03 0085fe80 0100175d iisadmin!ServiceEntry+0x11b
04 0085ffa8 77dd8c41 inetinfo!InetinfoStartService+0xfb
05 0085ffb8 77f04ef0 ADVAPI32!ScSvcctrlThreadA+0xe
06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 2
System Thread ID: b9
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: *** ERROR: Symbol file could not be found. Defaulted to
export symbols for asp.dll -
ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0097fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0097ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0097ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0097ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0097ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 0097ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 3
System Thread ID: be
Kernel Time: 0:0:0.50
User Time: 0:0:0.350
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
INFOCOMM.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0154fd34 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0154fd8c 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0154fde8 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0154fe04 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 01012e84 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4




Thread ID: 4
System Thread ID: 40
Kernel Time: 0:0:2.363
User Time: 0:0:56.791
Thread Type: Other
# ChildEBP RetAddr
00 0158fd28 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0158fd80 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0158fddc 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0158fdf8 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0023e9ec 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4




Thread ID: 5
System Thread ID: 50
Kernel Time: 0:0:0.30
User Time: 0:0:0.20
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ISATQ.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 015dfe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 015dfef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 015dff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 015dff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116




Thread ID: 6
System Thread ID: 5d
Kernel Time: 0:0:0.50
User Time: 0:0:0.30
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0161fe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0161fef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0161ff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0161ff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116




Thread ID: 7
System Thread ID: ad
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MSWSOCK.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3svc.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0165fc3c 7766913d ntdll!NtDeviceIoControlFile+0xb
01 0165fce0 7767b6b9 msafd!TransmitFile+0xbf
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0165fd04 68623f94 MSWSOCK!TransmitFile+0x3e
03 0165fd34 68c24c20 ISATQ!AtqTransmitFile+0x8f
04 0165fd6c 68c0c7e8 w3svc!HTTP_REQ_BASE::TestConnection+0xbc
05 0165fdc4 68c15f9c w3svc!CLIENT_CONN::Free+0x1a54
06 0165ff20 68c0a362 w3svc!HTTP_REQUEST::GetInfoForName+0x21a0
07 0165ff40 68c0ae08 w3svc!ScanForTerminator+0x3ca
08 0165ff88 6862731c w3svc!CLIENT_CONN::Free+0x74
09 0165ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x63c
0a 0165ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 8
System Thread ID: 43
Kernel Time: 0:0:0.100
User Time: 0:0:0.20
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0169f9d8 77f10f30 ntdll!ZwCreateFile+0xb
01 0169fa7c 685a6e35 KERNEL32!CreateFileW+0x396
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0169fd78 68c0c2f1 INFOCOMM!TsCreateFileFromURI+0x340
03 0169fdc4 68c15f9c w3svc!CLIENT_CONN::Free+0x155d
04 0169ff20 68c0a362 w3svc!HTTP_REQUEST::GetInfoForName+0x21a0
05 0169ff40 68c0ae08 w3svc!ScanForTerminator+0x3ca
06 0169ff88 6862731c w3svc!CLIENT_CONN::Free+0x74
07 0169ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x63c
08 0169ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 9
System Thread ID: bf
Kernel Time: 0:0:0.360
User Time: 0:0:0.580
Thread Type: Other
# ChildEBP RetAddr
00 016dff30 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 016dff88 685a7e80 KERNEL32!WaitForMultipleObjectsEx+0xef
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 685b35a0 0346d7f8 INFOCOMM!TS_OPEN_FILE_INFO::MakeStrongETag+0x7d3
03 0009bb60 685b35a0 0x346d7f8
04 0009e488 0009bb60 INFOCOMM!MB::GetMultisz+0x649c
05 0009d280 0009e488 0x9bb60
06 0009da58 0009d280 0x9e488
07 0009ec98 0009da58 0x9d280
08 0009f470 0009ec98 0x9da58
09 0009fc48 0009f470 0x9ec98
0a 000a0420 0009fc48 0x9f470
0b 000a0bf8 000a0420 0x9fc48
0c 000a13d0 000a0bf8 0xa0420
0d 000a1ba8 000a13d0 0xa0bf8
0e 000a2380 000a1ba8 0xa13d0
0f 00e53018 000a2380 0xa1ba8
10 00e537f0 00e53018 0xa2380
11 00e53fc8 00e537f0 0xe53018
12 00e547a0 00e53fc8 0xe537f0
13 00e54f78 00e547a0 0xe53fc8
14 00e55750 00e54f78 0xe547a0
15 00e55f28 00e55750 0xe54f78
16 00e57018 00e55f28 0xe55750
17 00eae938 00e57018 0xe55f28
18 00eaf110 00eae938 0xe57018
19 00eaf8e8 00eaf110 0xeae938
1a 00eb0348 00eaf8e8 0xeaf110
1b 00f03cf0 00eb0348 0xeaf8e8
1c 00f047f0 00f03cf0 0xeb0348
1d 00f04fc8 00f047f0 0xf03cf0
1e 00f06a58 00f04fc8 0xf047f0
1f 00f074f8 00f06a58 0xf04fc8
20 00f07cd0 00f074f8 0xf06a58
21 01fdebb0 00f07cd0 0xf074f8
22 01fe07e8 01fdebb0 0xf07cd0
23 01fe1148 01fe07e8 0x1fdebb0
24 01fe1920 01fe1148 0x1fe07e8
25 01fe2400 01fe1920 0x1fe1148
26 01fe2ec0 01fe2400 0x1fe1920
27 01fe3698 01fe2ec0 0x1fe2400
28 01fe41b0 01fe3698 0x1fe2ec0
29 01fe4988 01fe41b0 0x1fe3698
2a 01fe5408 01fe4988 0x1fe41b0
2b 01fe5ea8 01fe5408 0x1fe4988
2c 0227f3d0 01fe5ea8 0x1fe5408
2d 0227fba8 0227f3d0 0x1fe5ea8
2e 02280380 0227fba8 0x227f3d0
2f 02280b58 02280380 0x227fba8
30 02281330 02280b58 0x2280380
31 02281b08 02281330 0x2280b58




Thread ID: 10
System Thread ID: c0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0171fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0171ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0171ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0171ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0171ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 0171ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 11
System Thread ID: c1
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0175fd20 776689ce ntdll!NtWaitForSingleObject+0xb
01 0175fd78 77664a12 msafd!SockWaitForSingleObject+0x204
02 0175fea0 776ba274 msafd!WSPSelect+0x28e
03 0175fef0 74fa21e2 WS2_32!select+0xfc
04 0175ff2c 77e20fae RpcLtScm!COMMON_ServerReceiveAny+0x2b8
05 0175ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
06 0175ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
07 0175ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
08 0175ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
09 0175ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
0a 0175ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 12
System Thread ID: c2
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 017efee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 017eff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 017eff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 017eff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 017eff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 017effac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 017effb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
07 017effec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 13
System Thread ID: c3
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MSVCRT.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0182fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0182fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0182ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0182ff40 68c22d44 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0182ff84 7800bea1 w3svc!HTTP_HEADERS::Cleanup+0x2f55
05 0182ffb8 77f04ef0 MSVCRT!beginthread+0xce
06 0182ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 14
System Thread ID: c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 0186fea8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0186ff00 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0186ff5c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0186ff78 68c1acea USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0186ffb8 77f04ef0 w3svc!ServiceEntry+0x6d7
05 0186ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 15
System Thread ID: c5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 018afca0 776689ce ntdll!NtWaitForSingleObject+0xb
01 018afcf8 77664a12 msafd!SockWaitForSingleObject+0x204
02 018afe20 776ba274 msafd!WSPSelect+0x28e
03 018afe70 68563c07 WS2_32!select+0xfc
04 018affb8 77f04ef0 inetsloc!SocketListenThread+0x51
05 018affec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 16
System Thread ID: c6
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 018efdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 018eff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 018eff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 018effac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 018effb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 018effec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 17
System Thread ID: c7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0192fee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 0192ff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 0192ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 0192ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 0192ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 0192ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 0192ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
07 0192ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 18
System Thread ID: c9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
SMTPSVC.dll -
Thread Type: Other
# ChildEBP RetAddr
00 019bff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 019bff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 019bff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 019bffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 19
System Thread ID: ca
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 019fff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 019fff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 019fff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 019fffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 20
System Thread ID: cb
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01a3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01a3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01a3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01a3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 21
System Thread ID: cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01a7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01a7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01a7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01a7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 22
System Thread ID: cd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01abff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01abff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01abff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01abffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 23
System Thread ID: ce
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01afff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01afff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01afff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01afffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 24
System Thread ID: 68
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01b3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01b3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01b3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 25
System Thread ID: cf
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01b7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01b7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01b7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 26
System Thread ID: d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01bbff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01bbff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01bbff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01bbffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 27
System Thread ID: d1
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01bfff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01bfff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01bfff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01bfffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 28
System Thread ID: d2
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01c3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01c3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01c3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01c3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 29
System Thread ID: d3
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01c7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01c7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01c7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01c7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 30
System Thread ID: d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01cbff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01cbff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01cbff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01cbffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 31
System Thread ID: d5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01cfff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01cfff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01cfff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01cfffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 32
System Thread ID: d6
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01d3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01d3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01d3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 33
System Thread ID: d7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01d7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01d7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01d7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 34
System Thread ID: d8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01dbff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01dbff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01dbff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01dbffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01163e80 000003d8 KERNEL32!BaseThreadStart+0x51




Thread ID: 35
System Thread ID: d9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01dfff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01dfff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01dfff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01dfffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01163ee0 000003e0 KERNEL32!BaseThreadStart+0x51




Thread ID: 36
System Thread ID: da
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01e3ff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01e3ff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01e3ff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01e3ffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01163170 000003e8 KERNEL32!BaseThreadStart+0x51




Thread ID: 37
System Thread ID: db
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01e7ff6c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01e7ff94 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01e7ffa4 678d6f04 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01e7ffec 00000000 SMTPSVC!TS_DIRECTORY_INFO::Print+0x1b4b4




Thread ID: 38
System Thread ID: dd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01efff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01efff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01efff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01efffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01164100 00000408 KERNEL32!BaseThreadStart+0x51




Thread ID: 39
System Thread ID: df
Kernel Time: 0:0:0.60
User Time: 0:0:0.80
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0257fc3c 7766913d ntdll!NtDeviceIoControlFile+0xb
01 0257fce0 7767b6b9 msafd!TransmitFile+0xbf
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0257fd04 68623f94 MSWSOCK!TransmitFile+0x3e
03 0257fd34 68c24c20 ISATQ!AtqTransmitFile+0x8f
04 0257fd6c 68c0c7e8 w3svc!HTTP_REQ_BASE::TestConnection+0xbc
05 0257fdc4 68c15f9c w3svc!CLIENT_CONN::Free+0x1a54
06 0257ff20 68c0a362 w3svc!HTTP_REQUEST::GetInfoForName+0x21a0
07 0257ff40 68c0ae08 w3svc!ScanForTerminator+0x3ca
08 0257ff88 6862731c w3svc!CLIENT_CONN::Free+0x74
09 0257ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x63c
0a 0257ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 40
System Thread ID: e0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 025bff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 025bff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 025bffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 025bffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 41
System Thread ID: e1
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 025fff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 025fff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 025fffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 025fffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 42
System Thread ID: e2
Kernel Time: 0:0:0.10
User Time: 0:0:0.20
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0263ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 0263ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0263ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 0263ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 43
System Thread ID: e3
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0267ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 0267ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0267ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 0267ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 44
System Thread ID: e4
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 026bff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 026bff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 026bffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 026bffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 45
System Thread ID: e5
Kernel Time: 0:0:0.200
User Time: 0:0:0.340
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 026fff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 026fff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 026fffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 026fffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 46
System Thread ID: e6
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0273ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 0273ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0273ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 0273ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 47
System Thread ID: e7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 042bff64 77f1d0be ntdll!NtDelayExecution+0xb
01 042bff84 77f1d087 KERNEL32!SleepEx+0x34
02 042bff90 77b6ec9f KERNEL32!Sleep+0xb
03 042bff98 77b72f71 ole32!CRpcResolver::WorkerThreadLoop+0xc
04 042bffac 77b72eff ole32!CRpcThread::WorkerLoop+0x15
05 042bffb8 77f04ef0 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 042bffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 48
System Thread ID: bd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MtxDm.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 042fff58 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 042fff80 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 042fff90 69a21998 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 042fffb8 77f04ef0 MtxDm+0x1998
04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 49
System Thread ID: bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0436fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0436fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0436ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0436ff40 680c5fa5 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0436ff84 7800bea1 asp!AspStatusHtmlDump+0x276d
05 0436ffb8 77f04ef0 MSVCRT!beginthread+0xce
06 0436ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 50
System Thread ID: 57
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 043afe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 043afec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 043aff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 043aff40 680bbf64 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 043aff84 7800bea1 asp!DllCanUnloadNow+0x2ff0
05 043affb8 77f04ef0 MSVCRT!beginthread+0xce
06 043affec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 51
System Thread ID: ef
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
*** WARNING: Unable to verify checksum for pdm.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
pdm.dll -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 043efdd8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 043efe30 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 043efe8c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 043efea8 4a003b19 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 77e7ae75 0110247c pdm+0x3b19
05 83ec8b55 00000000 0x110247c




Thread ID: 52
System Thread ID: f7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0442fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0442ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0442ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0442ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0442ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 0442ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 53
System Thread ID: f8
Kernel Time: 0:0:0.80
User Time: 0:0:0.100
Thread Type: Other
# ChildEBP RetAddr
00 0448fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0448feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0448ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0448ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 0448ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 0448ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may be
wrong.
06 0448ff90 77b3067a MSVCRT!beginthread+0xce
07 0448ffb8 77f04ef0 ole32!WriteObjRef+0x5f
08 0448ffcc 77b3067a KERNEL32!BaseThreadStart+0x51




Thread ID: 54
System Thread ID: f9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
oledb32.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04f3ff5c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 04f3ff84 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 04f3ff94 1f8945ab KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 04f3ffb8 77f04ef0 oledb32!DllGetClassObject+0x2881
04 04f3ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 55
System Thread ID: fa
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04f7ff54 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 04f7ff7c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 04f7ff8c 1f8945bb KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 04f7ffb8 77f04ef0 oledb32!DllGetClassObject+0x2891
04 04f7ffec 00000000 KERNEL32!BaseThreadStart+0x51

Closing open log file C:\iisstate\output\IISState-107.log
 >> Stay informed about: 823980 on IIS4 
Back to top
Login to vote
bighouse1

External


Since: Sep 02, 2003
Posts: 13



(Msg. 8) Posted: Tue Sep 02, 2003 6:36 pm
Post subject: Re: 823980 on IIS4 - log #2 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Opened log file 'C:\iisstate\output\IISState-107.log'

***********************
Starting new log output
IISState version 3.1

Tue Sep 02 15:16:48 2003

OS = NT4
Executable: inetinfo.exe
PID = 107

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 6a
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd44 77f0d2ca ntdll!NtReadFile+0xb
01 0006fdb0 77dd8a61 KERNEL32!ReadFile+0x1a6
02 0006fde4 77dd84ad ADVAPI32!ScGetPipeInput+0x28
03 0006fe48 77dd82ca ADVAPI32!ScDispatcherLoop+0x46
04 0006fe6c 0100182c ADVAPI32!StartServiceCtrlDispatcherA+0x82
05 0006fea4 010015d5 inetinfo!StartDispatchTable+0x61
06 0006ff70 01001e7f inetinfo!main+0x2a5
07 0006ffc0 77f1bbb5 inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40




Thread ID: 1
System Thread ID: 3f
Kernel Time: 0:0:0.10
User Time: 0:0:16.613
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0085fe2c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 0085fe54 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 0085fe64 683a18fe KERNEL32!WaitForSingleObject+0xf
03 0085fe80 0100175d iisadmin!ServiceEntry+0x11b
04 0085ffa8 77dd8c41 inetinfo!InetinfoStartService+0xfb
05 0085ffb8 77f04ef0 ADVAPI32!ScSvcctrlThreadA+0xe
06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 2
System Thread ID: be
Kernel Time: 0:0:0.50
User Time: 0:0:0.350
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
INFOCOMM.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0154fd34 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0154fd8c 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0154fde8 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0154fe04 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 01012e84 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4




Thread ID: 3
System Thread ID: 40
Kernel Time: 0:0:2.363
User Time: 0:0:56.791
Thread Type: Other
# ChildEBP RetAddr
00 0158fd28 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0158fd80 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0158fddc 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0158fdf8 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0023e9ec 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4




Thread ID: 4
System Thread ID: 50
Kernel Time: 0:0:0.80
User Time: 0:0:0.380
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ISATQ.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 015dfe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 015dfef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 015dff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 015dff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116




Thread ID: 5
System Thread ID: 5d
Kernel Time: 0:0:0.50
User Time: 0:0:0.30
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0161fe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0161fef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0161ff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0161ff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116




Thread ID: 6
System Thread ID: ad
Kernel Time: 0:0:0.100
User Time: 0:0:0.260
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3svc.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0165f9d8 77f10f30 ntdll!ZwCreateFile+0xb
01 0165fa7c 685a6e35 KERNEL32!CreateFileW+0x396
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0165fd78 68c0c2f1 INFOCOMM!TsCreateFileFromURI+0x340
03 0165fdc4 68c15f9c w3svc!CLIENT_CONN::Free+0x155d
04 0165ff20 68c0a362 w3svc!HTTP_REQUEST::GetInfoForName+0x21a0
05 0165ff40 68c0ae08 w3svc!ScanForTerminator+0x3ca
06 0165ff88 6862731c w3svc!CLIENT_CONN::Free+0x74
07 0165ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x63c
08 0165ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 7
System Thread ID: 43
Kernel Time: 0:0:0.400
User Time: 0:0:0.731
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0169fc3c 7766913d ntdll!NtDeviceIoControlFile+0xb
01 0169fce0 7767b6b9 msafd!TransmitFile+0xbf
02 0169fd04 68623f94 MSWSOCK!TransmitFile+0x3e
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0169fd34 68c24c20 ISATQ!AtqTransmitFile+0x8f
04 0169fd6c 68c0c7e8 w3svc!HTTP_REQ_BASE::TestConnection+0xbc
05 0169fdc4 68c15f9c w3svc!CLIENT_CONN::Free+0x1a54
06 0169ff20 68c0a362 w3svc!HTTP_REQUEST::GetInfoForName+0x21a0
07 0169ff40 68c0ae08 w3svc!ScanForTerminator+0x3ca
08 0169ff88 6862731c w3svc!CLIENT_CONN::Free+0x74
09 0169ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x63c
0a 0169ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 8
System Thread ID: bf
Kernel Time: 0:0:0.420
User Time: 0:0:0.590
Thread Type: Other
# ChildEBP RetAddr
00 016dff30 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 016dff88 685a7e98 KERNEL32!WaitForMultipleObjectsEx+0xef
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 685b35a0 0346d7f8 INFOCOMM!TS_OPEN_FILE_INFO::MakeStrongETag+0x7eb
03 0009bb60 685b35a0 0x346d7f8
04 0009e488 0009bb60 INFOCOMM!MB::GetMultisz+0x649c
05 0009d280 0009e488 0x9bb60
06 0009da58 0009d280 0x9e488
07 0009ec98 0009da58 0x9d280
08 0009f470 0009ec98 0x9da58
09 0009fc48 0009f470 0x9ec98
0a 000a0420 0009fc48 0x9f470
0b 000a0bf8 000a0420 0x9fc48
0c 000a13d0 000a0bf8 0xa0420
0d 000a1ba8 000a13d0 0xa0bf8
0e 000a2380 000a1ba8 0xa13d0
0f 00e53018 000a2380 0xa1ba8
10 00e537f0 00e53018 0xa2380
11 00e53fc8 00e537f0 0xe53018
12 00e547a0 00e53fc8 0xe537f0
13 00e54f78 00e547a0 0xe53fc8
14 00e55750 00e54f78 0xe547a0
15 00e55f28 00e55750 0xe54f78
16 00e57018 00e55f28 0xe55750
17 00eae938 00e57018 0xe55f28
18 00eaf110 00eae938 0xe57018
19 00eaf8e8 00eaf110 0xeae938
1a 00eb0348 00eaf8e8 0xeaf110
1b 00f03cf0 00eb0348 0xeaf8e8
1c 00f047f0 00f03cf0 0xeb0348
1d 00f04fc8 00f047f0 0xf03cf0
1e 00f06a58 00f04fc8 0xf047f0
1f 00f074f8 00f06a58 0xf04fc8
20 00f07cd0 00f074f8 0xf06a58
21 01fdebb0 00f07cd0 0xf074f8
22 01fe07e8 01fdebb0 0xf07cd0
23 01fe1148 01fe07e8 0x1fdebb0
24 01fe1920 01fe1148 0x1fe07e8
25 01fe2400 01fe1920 0x1fe1148
26 01fe2ec0 01fe2400 0x1fe1920
27 01fe3698 01fe2ec0 0x1fe2400
28 01fe41b0 01fe3698 0x1fe2ec0
29 01fe4988 01fe41b0 0x1fe3698
2a 01fe5408 01fe4988 0x1fe41b0
2b 01fe5ea8 01fe5408 0x1fe4988
2c 0227f3d0 01fe5ea8 0x1fe5408
2d 0227fba8 0227f3d0 0x1fe5ea8
2e 02280380 0227fba8 0x227f3d0
2f 02280b58 02280380 0x227fba8
30 02281330 02280b58 0x2280380
31 02281b08 02281330 0x2280b58




Thread ID: 9
System Thread ID: c0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: *** ERROR: Symbol file could not be found. Defaulted to
export symbols for asp.dll -
ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0171fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0171ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0171ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0171ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0171ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 0171ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 10
System Thread ID: c1
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0175fd20 776689ce ntdll!NtWaitForSingleObject+0xb
01 0175fd78 77664a12 msafd!SockWaitForSingleObject+0x204
02 0175fea0 776ba274 msafd!WSPSelect+0x28e
03 0175fef0 74fa21e2 WS2_32!select+0xfc
04 0175ff2c 77e20fae RpcLtScm!COMMON_ServerReceiveAny+0x2b8
05 0175ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
06 0175ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
07 0175ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
08 0175ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
09 0175ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
0a 0175ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 11
System Thread ID: c2
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 017efee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 017eff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 017eff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 017eff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 017eff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 017effac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 017effb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
07 017effec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 12
System Thread ID: c3
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MSVCRT.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0182fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0182fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0182ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0182ff40 68c22d44 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0182ff84 7800bea1 w3svc!HTTP_HEADERS::Cleanup+0x2f55
05 0182ffb8 77f04ef0 MSVCRT!beginthread+0xce
06 0182ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 13
System Thread ID: c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 0186fea8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0186ff00 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0186ff5c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0186ff78 68c1acea USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0186ffb8 77f04ef0 w3svc!ServiceEntry+0x6d7
05 0186ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 14
System Thread ID: c5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 018afca0 776689ce ntdll!NtWaitForSingleObject+0xb
01 018afcf8 77664a12 msafd!SockWaitForSingleObject+0x204
02 018afe20 776ba274 msafd!WSPSelect+0x28e
03 018afe70 68563c07 WS2_32!select+0xfc
04 018affb8 77f04ef0 inetsloc!SocketListenThread+0x51
05 018affec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 15
System Thread ID: c6
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 018efdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 018eff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 018eff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 018effac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 018effb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 018effec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 16
System Thread ID: c7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0192fee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 0192ff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 0192ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 0192ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 0192ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 0192ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 0192ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
07 0192ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 17
System Thread ID: c9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
SMTPSVC.dll -
Thread Type: Other
# ChildEBP RetAddr
00 019bff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 019bff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 019bff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 019bffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 18
System Thread ID: ca
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 019fff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 019fff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 019fff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 019fffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 19
System Thread ID: cb
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01a3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01a3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01a3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01a3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 20
System Thread ID: cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01a7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01a7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01a7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01a7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 21
System Thread ID: cd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01abff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01abff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01abff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01abffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 22
System Thread ID: ce
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01afff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01afff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01afff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01afffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 23
System Thread ID: 68
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01b3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01b3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01b3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 24
System Thread ID: cf
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01b7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01b7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01b7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 25
System Thread ID: d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01bbff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01bbff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01bbff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01bbffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 26
System Thread ID: d1
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01bfff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01bfff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01bfff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01bfffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 27
System Thread ID: d2
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01c3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01c3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01c3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01c3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 28
System Thread ID: d3
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01c7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01c7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01c7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01c7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 29
System Thread ID: d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01cbff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01cbff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01cbff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01cbffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 30
System Thread ID: d5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01cfff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01cfff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01cfff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01cfffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 31
System Thread ID: d6
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d3ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01d3ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01d3ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01d3ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 32
System Thread ID: d7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d7ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01d7ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 01d7ff84 678ba363 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01d7ffec 00000000 SMTPSVC!ServiceEntry+0xa6e3




Thread ID: 33
System Thread ID: d8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01dbff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01dbff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01dbff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01dbffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01163e80 000003d8 KERNEL32!BaseThreadStart+0x51




Thread ID: 34
System Thread ID: d9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01dfff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01dfff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01dfff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01dfffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01163ee0 000003e0 KERNEL32!BaseThreadStart+0x51




Thread ID: 35
System Thread ID: da
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01e3ff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01e3ff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01e3ff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01e3ffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01163170 000003e8 KERNEL32!BaseThreadStart+0x51




Thread ID: 36
System Thread ID: db
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01e7ff6c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01e7ff94 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01e7ffa4 678d6f04 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01e7ffec 00000000 SMTPSVC!TS_DIRECTORY_INFO::Print+0x1b4b4




Thread ID: 37
System Thread ID: dd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01efff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01efff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01efff9c 678d1ef7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01efffb8 77f04ef0 SMTPSVC!TS_DIRECTORY_INFO::Print+0x164a7
04 01164100 00000408 KERNEL32!BaseThreadStart+0x51




Thread ID: 38
System Thread ID: df
Kernel Time: 0:0:0.110
User Time: 0:0:0.150
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0257ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 0257ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0257ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 0257ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 39
System Thread ID: e0
Kernel Time: 0:0:0.20
User Time: 0:0:0.10
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 025bff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 025bff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 025bffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 025bffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 40
System Thread ID: e1
Kernel Time: 0:0:0.30
User Time: 0:0:0.10
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 025fff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 025fff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 025fffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 025fffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 41
System Thread ID: e2
Kernel Time: 0:0:0.20
User Time: 0:0:0.40
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0263ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 0263ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0263ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 0263ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 42
System Thread ID: e3
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0267ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 0267ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0267ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 0267ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 43
System Thread ID: e4
Kernel Time: 0:0:0.0
User Time: 0:0:0.30
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 026bff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 026bff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 026bffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 026bffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 44
System Thread ID: e5
Kernel Time: 0:0:0.210
User Time: 0:0:0.360
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 026fff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 026fff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 026fffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 026fffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 45
System Thread ID: e6
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0273ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 0273ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0273ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 0273ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 46
System Thread ID: e7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 042bff64 77f1d0be ntdll!NtDelayExecution+0xb
01 042bff84 77f1d087 KERNEL32!SleepEx+0x34
02 042bff90 77b6ec9f KERNEL32!Sleep+0xb
03 042bff98 77b72f71 ole32!CRpcResolver::WorkerThreadLoop+0xc
04 042bffac 77b72eff ole32!CRpcThread::WorkerLoop+0x15
05 042bffb8 77f04ef0 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 042bffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 47
System Thread ID: bd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MtxDm.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 042fff58 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 042fff80 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 042fff90 69a21998 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 042fffb8 77f04ef0 MtxDm+0x1998
04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 48
System Thread ID: bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0436fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0436fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0436ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0436ff40 680c5fa5 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0436ff84 7800bea1 asp!AspStatusHtmlDump+0x276d
05 0436ffb8 77f04ef0 MSVCRT!beginthread+0xce
06 0436ffec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 49
System Thread ID: 57
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 043afe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 043afec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 043aff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 043aff40 680bbf64 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 043aff84 7800bea1 asp!DllCanUnloadNow+0x2ff0
05 043affb8 77f04ef0 MSVCRT!beginthread+0xce
06 043affec 00000000 KERNEL32!BaseThreadStart+0x51




Thread ID: 50
System Thread ID: ef
Kernel Time: 0:0:0.20
User Time: 0:0:0.0
*** WARNING: Unable to verify checksum for pdm.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
pdm.dll -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 043efdd8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 043efe30 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 043efe8c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 043efea8 4a003b19 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 77e7ae75 0110247c pdm+0x3b19
05 83ec8b55 00000000 0x110247c




Thread ID: 51
System Thread ID: f8
Kernel Time: 0:0:0.80
User Time: 0:0:0.210
Thread Type: Other
# ChildEBP RetAddr
00 0448fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0448feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0448ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0448ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 0448ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 0448ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may be
wrong.
06 0448ff90 77b3067a MSVCRT!beginthread+0xce
07 0448ffb8 77f04ef0 ole32!WriteO